Suppose you are investigating a connection
failure and you want to check if the connection was dropped from IIS or HTTP; you
also want to find out the date, time, the URL requested and the reason for the
failure. If this is the case, you can use the following
log parser query that will not only give you the log file where the entry is,
but also the data you need to further troubleshoot the problem.

Now suppose, you are investigating a
specific problem, such as "Service Unavailable," and you want to find out details like
the client IP, client port, and reason. You can filter this with the
sc-status code of 503.